Static task
static1
Behavioral task
behavioral1
Sample
6443ffb4140e464af9f0d171d6026310.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6443ffb4140e464af9f0d171d6026310.dll
Resource
win10v2004-20231222-en
General
-
Target
6443ffb4140e464af9f0d171d6026310
-
Size
20KB
-
MD5
6443ffb4140e464af9f0d171d6026310
-
SHA1
068d74eb6557750d19c6ec6edca9eb44b34c3a6a
-
SHA256
e04b111c8fcbddf5df8d93c93101fe6f980981c01adf878efb10f861e23aabfe
-
SHA512
bfa42220e9cff1e91bb15f136dab82bca45073c6e6707abf8331df0f69d45167e66b4602c89303a6410c75fdfd083d8131bac6e80503fa50832f3be530f52f6d
-
SSDEEP
384:gOxLMRituH805/Dr6RWJccvaqEEoJE378e1iEQ8JGWyDIoLTz8BWP5:gRYtuc05/yYJclXJE378WiDDLLLTz8oh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6443ffb4140e464af9f0d171d6026310
Files
-
6443ffb4140e464af9f0d171d6026310.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 132KB - Virtual size: 416KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE